<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>exp-Networks&#187; Firewall</title>
	<atom:link href="http://www.exp-networks.be/blog/tag/firewall/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.exp-networks.be</link>
	<description>Networks and security consulting</description>
	<lastBuildDate>Thu, 27 Oct 2011 07:23:28 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>BGP between ScreenOS and IOS</title>
		<link>http://www.exp-networks.be/blog/bgp-between-screenos-and-ios/</link>
		<comments>http://www.exp-networks.be/blog/bgp-between-screenos-and-ios/#comments</comments>
		<pubDate>Wed, 26 Oct 2011 06:47:48 +0000</pubDate>
		<dc:creator>Christophe Lemaire</dc:creator>
				<category><![CDATA[Networking]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[Firewall]]></category>
		<category><![CDATA[Juniper]]></category>
		<category><![CDATA[Networks]]></category>

		<guid isPermaLink="false">http://www.exp-networks.be/?p=636</guid>
		<description><![CDATA[There are some times where using static routing on firewalls is simply not scalable&#8230; As long as the routing is inside a trusted network, I do not see any reason to avoid dynamic routing. Juniper devices (Junos and ScreenOS) can even use virtual routers to split the routing domain into several domains. In the example [...]]]></description>
		<wfw:commentRss>http://www.exp-networks.be/blog/bgp-between-screenos-and-ios/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Zone-based IOS firewall</title>
		<link>http://www.exp-networks.be/blog/zfw/</link>
		<comments>http://www.exp-networks.be/blog/zfw/#comments</comments>
		<pubDate>Mon, 21 Feb 2011 14:24:53 +0000</pubDate>
		<dc:creator>Christophe Lemaire</dc:creator>
				<category><![CDATA[Networking]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[Firewall]]></category>
		<category><![CDATA[Networks]]></category>

		<guid isPermaLink="false">http://www.exp-networks.be/?p=270</guid>
		<description><![CDATA[IOS Zone-Based Policy Firewall model allows the router's administrator to define security zones, assign interfaces to zones, apply security policies between zones as he would have done on a Juniper firewall or on a Cisco ASA.]]></description>
		<wfw:commentRss>http://www.exp-networks.be/blog/zfw/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>IPv6 Firewall with Linux</title>
		<link>http://www.exp-networks.be/blog/ipv6-firewall/</link>
		<comments>http://www.exp-networks.be/blog/ipv6-firewall/#comments</comments>
		<pubDate>Thu, 17 Sep 2009 15:21:51 +0000</pubDate>
		<dc:creator>Christophe Lemaire</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Systems]]></category>
		<category><![CDATA[Firewall]]></category>
		<category><![CDATA[IPv6]]></category>
		<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://www.exp-networks.be/?p=203</guid>
		<description><![CDATA[More and more server hoster have configured IPv6 on their network. And most of their Linux based servers come with a basic IPv6 configuration. Even if IPv6 is not used, it is there and widely open as the netfilter/iptables default policy is ACCEPT. If you don&#8217;t use IPv6 at all, disable it. On Debian, the [...]]]></description>
		<wfw:commentRss>http://www.exp-networks.be/blog/ipv6-firewall/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>

